75369 matches found
MINI-MJ77-8QGC-P6Q9
Bulletin has no description...
MINI-5HR2-QM4R-P2V2
Bulletin has no description...
MINI-FJP3-3447-M9QG
Bulletin has no description...
CVE-2026-15318
A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Affected by this issue is some unknown functionality of the file pkg/channels/mqtt/mqtt.go of the component MQTT Channel Handler. This manipulation of the argument clientid causes incorrect authorization. The attack is possible to be...
CVE-2026-15318
CVE-2026-15318 affects Sipeed PicoClaw up to version 0.2.9. The vulnerability lies in the MQTT Channel Handler, specifically in the file pkg/channels/mqtt/mqtt.go, where manipulation of the client_id argument leads to incorrect authorization. The issue can be exploited remotely, and public exploi...
CVE-2026-15317
creationtimestamp| type| source ---|---|--- 2026-07-10 00:55:49+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqawtt3ljg2o...
CVE-2026-59854
creationtimestamp| type| source ---|---|--- 2026-07-10 00:35:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqavozsbt62e...
CVE-2026-57501
creationtimestamp| type| source ---|---|--- 2026-07-10 00:13:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqauir5pl727...
GHSA-QCQ2-496W-V96P
creationtimestamp| type| source ---|---|--- 2026-07-10 00:11:47+00:00| seen| https://gist.github.com/alon710/ac77807be35ab79d5b8543a7caac77a2...
ECHO-D5B1-8A54-BB7B
Bulletin has no description...
PT-2026-57333
EverOS is a memory runtime for agents. Prior to 1.0.1, EverOS is vulnerable to path traversal in the POST /api/v1/memory/add ingestion endpoint because the per-message sender id field was not validated as a path-safe identifier, unlike app id and project id. During user-memory extraction, sender ...
PT-2026-57166
The iDirect iQ200 exposes the /api/identity and /api/ REST API endpoints without authentication. An unauthenticated attacker with network access can retrieve sensitive device information including the serial number, Device ID DID, Terminal Private Key identifier TPK, MAC address, and exact firmwa...
PT-2026-57066
The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to time-based SQL Injection via the ‘wpdevart id’ parameter in all versions up to, and including, 3.2.17 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existi...
PT-2026-57183
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2026.1.4 JetBrains IntelliJ IDEA versions prior to 2026.2 Description Improper handling of the project workspace ID allows for a relative path traversal, which can be leveraged to achieve remote code...
CVE-2026-54760 Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls
Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.1, the SQLChatAgent SQL-injection mitigation, with default allowdangerousoperations=False, combines a raw-text regex blocklist DANGEROUSSQLPATTERNS with a sqlglot SELECT-only statement allowlist...
MINI-3CMQ-G3VV-2VPG
Bulletin has no description...
MINI-V8W8-CCMH-7CX9
Bulletin has no description...
MINI-4VJP-6W5P-4MGF
Bulletin has no description...